◆
webkit security monitor
autonomous cve → commit → rca pipeline
Released September 16, 2024

CVE-2024-44187

CVSS 6.5 severity medium CWE-346 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Overview

Impact:

Description: A malicious website may exfiltrate data cross-origin

Researchers: Narendra Bhati, Manager of Cyber Security at Suma Soft Pvt. Ltd, Pune (India)

Background

Advisory: Apple Security Advisory

Attribute Value
CVE CVE-2024-44187
Bugzilla 279452
Component WebKit
Bug Class CrossOrigin
Severity medium
Advisory Apple Advisory

Fix not public. The WebKit fix for this bug is embargoed or not yet disclosed. The bug ID is confirmed from the Apple advisory, but no public commit references it.

Root Cause Analysis

A cross-origin issue existed with “iframe” elements. This was addressed with improved tracking of security origins.

Audit Directions

When auditing for this vulnerability, focus on: (1) similar patterns in the patched functions and nearby code, (2) missing or insufficient bounds checks on user-controlled input, (3) unvalidated type conversions and pointer arithmetic, (4) edge cases not exercised by tests, and (5) copy-paste variants of the vulnerable logic elsewhere.